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Top Stories 

• Four suspects were arrested October 21 among 8 charged for allegedly installing skimming 
devices inside gas pumps across southern California and Nevada. - Southern California 
City News Service (See item 1) 

• San Jose County, California officials reported October 21 that the number of people 
sickened with Shigella increased to 80 cases, with 12 taken to intensive care units. - San 
Francisco Chronicle (See item 13) 

• U.S. military officials announced October 22 that a Marine Corps fighter pilot was ki lled 
October 21 when his aircraft crashed immediately after take-off from Royal Air Force 
Lakenheath station in England. - Associated Press (See item 14) 

• Passaic County, New Jersey, officials reported that an 8-alarm fire at an apartment building 
displaced up to 400 people October 21 and injured 2 firefighters. - WPIX 11 New York 
City; Associated Press (See item 22) 
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Energy Sector 



1. October 22, Southern California City News Service - (California; Nevada) Four 
suspected of ‘skimming’ credit card numbers at gas stations in Long Beach, 
elsewhere. The U.S. attorney in Los Angeles announced that 4 suspects were arrested 
October 21 among 8 charged for allegedly participating in a scheme in which they 
installed skimming devices inside pumps at gas stations across southern California and 
in Las Vegas, Nevada. The suspects reportedly used a large van to conceal the 
installation of the devices and would obtain consumer’s financial information via 
Bluetooth-equipped devices, such as cell phones and tablets. 

Source: http://www.presstelegram.com/general-news/20151021/four-suspected-of- 
skimming-credit-card-numbers-at-gas-stations-in-long-beach-elsewhere 

2. October 22, WFOR 4 Miami - (Florida) Man charged in credit card skimming 
scheme. Police in Miami-Dade County arrested a man October 22 for allegedly 
installing skimming devices at gas stations across south Florida and for using the 
financial information to create counterfeit cards. Authorities believe the suspect 
obtained about 2,000 credit and debit card numbers. 

Source: http://miami.cbslocal.com/2015/10/22/man-charged-in-credit-card-skimming- 
scheme/ 

3. October 21, WOOD 8 Grand Rapids - (Michigan) Two companies fined for work- 
related death. The Michigan Occupational Safety and Health Administration cited 
Gates Electric, Inc., and Electrical Inspection Services, LLC in Holland with 6 worker 
safety violations, including failure to comply with National Electrical Code and for a 
lack of protective equipment and uniforms for employees, following a work-related 
death. Proposed penalties total $357,000. 

Source: http://woodtv.com/2015/10/21/two-companies-fined-for-work-related-death/ 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

4. October 22, WKYC 3 Cleveland - (Ohio) Steam explosion near TimkenSteel plant, 
minor injury reported. Authorities reported that a steam explosion at the FairCrest 
Steel Plant in Perry Township October 21 caused minor injuries to a plant employee 
and led to several spot fires that caused moderate damage to equipment outside the 
plant. The incident is under investigation. 

Source: http://www.wkvc.com/storv/news/local/stark-countv/2015/10/22/explosion- 
near-timkensteel-plant/74366800/ 
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Defense Industrial Base Sector 



Nothing to report 

Financial Services Sector 

5. October 21, WLS 7 Chicago - (Illinois) ‘North Center Bandit’ strikes bank again, 
FBI says. FBI officials are searching for a suspect dubbed the “North Center Bandit,” 
believed to be responsible for 4 robberies at Chase and PNC Bank branches in the 
Chicago area beginning August 21. The suspect’s most recent alleged robbery occurred 
at a Chase Bank branch in North Ashland October 20. 

Source: http://abc7chicago.com/news/north-center-bandit-strikes-bank-again-fbi- 
says/1044827/ 



For additional stories, see items 1 and 2 

Transportation Systems Sector 

6. October 22, KERO 23 Bakersfield - (California) Motorists react to Hwy 58 
reopening. Highway 58 in Tehachapi reopened October 21 after being shut down for 
almost a week due to a mudslide. Crews continue to work on the side of the road for the 
new few days to clear the roadways. 

Source : http://www.tumto23.com/news/local-news/motorists-react-to-hwv-58- 
reopening 

7. October 22, WYFF 4 Greenville - (South Carolina) 3 injured in fiery head-on 
collision. Highway 183 in Pickens County for over 2 hours October 21 while crews 
responded to a head-on collision that injured 3 people. The accident remains under 
investigation. 

Source: http://www.wvff4.com/news/3-iniured-in-fierv-headon-collision/35969520 

8. October 22, Houston Chronicle - (Texas) Truck’s lost load closes a part of U.S. 290. 
All main lanes of westbound Northwest Freeway at Fairbanks North Houston were shut 
down for approximately 7 hours October 21 while crews cleared the scene after a semi- 
truck overturned and spilled its load. No injuries reported. 

Source: http://www.chron.com/news/houston-traffic/article/Truck-s-lost-load-closes-a- 
part-of-U-S-290-6583172.php 

9. October 21, Boston Globe - (Massachusetts) Gas leak and small fire at rail yard 
cause commuter rail delays. Regular service on the Massachusetts Bay Transportation 
Authority commuter rail resumed after being limited to one track for about 2 hours 
while crews responded to a National Grid gas leak and fire at a rail yard October 21. 
The transit warned commuters to expect residual delays. 

Source: http://www.boston.com/news/2015/10/21/gas-leak-and-small-fire-rail-yard- 
cause-commuter-rail-delavs/JzJpvgJsDxFellazUUxkWL/story.html 
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Food and Agriculture Sector 



10. October 22, U.S. Food and Drug Administration - (National) VIS Seafoods is issuing 
a voluntary recall on all canned salmon products because of a possible health risk. 
Bellingham, Washington-based Vis Seafoods recalled October 21 all of its canned 
salmon and smoked salmon manufactured by Skipanon Brand Seafoods LLC after an 
inspection at Skipanon Brand Seafoods LLC facility discovered the products contained 
Clostridium botulinum. The products were shipped to retail stores in Bellingham, 
Washington and via Internet sales. 

Source: http://www.fda.gov/Safety/Recalls/ucm468555.htm 

11. October 22, U.S. Food and Drug Administration - (Oregon) The Spot issuing a 
voluntary recall on all canned seafood products because of a possible health risk. 
Garibaldi, Oregon-based The Spot issued a voluntary recall October 2 Ion all of its 
canned salmon and tuna products manufactured by Skipanon Brand Seafoods LLC after 
an inspection at Skipanon Brand Seafoods LLC facility revealed the products contained 
Clostridium botulinum. The products were shipped to retail stores in Oregon. 

Source: http://www.fda.gov/Safety/Recalls/ucm468554.htm 

12. October 21, U.S. Food and Drug Administration - (National) Brigham Fish Market is 
voluntarily recalling canned seafood products because of possible health risk. The 
U.S. Food and Drug Administration reported October 19 that Skipanon Brand Seafoods 
issued a voluntary recall of all its 6-ounce canned seafood products including Canned 
Smoked Chinook Salmon and Canned Chinook Salmon due to under-processed 
products that may lead to possible contamination of Clostridium botulinum. The 
products were distributed to several retailers nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm468420.htm 

13. October 21, San Francisco Chronicle - (California) Shigella outbreak linked to 
South Bay restaurant grows. San Jose County health authorities reported October 21 
that the number of people sickened with Shigella increased to 80 cases, 12 of which 
were taken to intensive care units, after each person consumed food from the Mariscos 
San Juan restaurant following an October 18 outbreak that closed the establishment. 

The restaurant remains closed until health authorities deem it is safe for the public. 
Source: http://www.msn.com/en-us/news/us/shigella-outbreak-linked-to-south-bay- 
restaurant-grows/ar-BBmhMCa 

Water and Wastewater Systems Sector 

Nothing to report 

Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 



14. October 22, Associated Press - (International) US fighter pilot killed after jet crashes 
in England. U.S. military officials announced October 22 that a U.S. Marine Corps 
fighter pilot was killed October 21 when his F/A-18C Hornet aircraft crashed 
immediately after taking off from the Royal Air Force Lakenheath station in England. 
The plane was among six San Diego-based aircraft returning from a 6-month 
deployment in the Middle East. 

Source: https://www.bostonglobe.com/news/world/2Q15/10/21/pilot-killed-after-iet- 
crashes -en gland/RDmGL w7 49 8MdTRHF GRr KOM/story . html 

15. October 22, Wisconsin State Journal - (Wisconsin) WHEDA offices reopen after 
power restored following fire. The Wisconsin Housing and Economic Development 
Authority in Madison reopened October 22 after the building was evacuated and closed 
October 21 due to a power outage caused by a small electrical fire that began in a 
storage room in the underground parking garage. 

Source: http://host.madison.com/wsi/news/local/wheda-offices-reopen-fire-knocked- 
out-power/article 4a3bff7b-3580-57d0-b52c-8f3d034a6141 .html 

16. October 21, Las Cruces Sun-News - (New Mexico) County government building 
evacuated. The Dona Ana County Government Center in Las Cruces was evacuated 
and closed October 21 after an employee reported a suspicious package that was 
dropped off by an individual. Authorities inspected the package and determined that it 
only contained real estate information and did not pose a threat. 

Source: http://www.lcsun-news.com/storv/news/crime/2015/10/21/county-govemment- 
building-evacuated/74344284/ 

17. October 21, WATE 6 Knoxville - (Tennessee) 9 students injured in east Tennessee 
school bus crash. An October 21 accident involving a school bus that rolled onto its 
side and slide down an embankment after its tires dropped off the pavement in Roane 
County hospitalized 9 of the 22 students on the bus. 

Source: http://wkm.com/2015/10/21/9-students-injured-in-east-tennessee-school-bus- 
crash/ 



Emergency Services Sector 

Nothing to report 

Information Technology Sector 

18. October 22, Securityweek - (International) New NTP vulnerabilities put networks at 
risk. The Network Time Foundation’s NTP Project released an update addressing 13 
denial-of-service (DoS), directory traversal, memory corruption, authentication bypass, 
and file overwrite vulnerabilities in the Network Time Protocol (NTP), as well as a 
“crypto-NAK” issue that could allow an unauthenticated off-path attacker to force 
Network Time Protocol daemon (ntpd) processes to peer with malicious time sources, 
eventually gaining the ability to bypass security mechanisms and change system time, 
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among other activities. 

Source: http://www.securityweek.com/new-ntp-vulnerabilities-put-networks-risk 

19. October 22, Softpedia - (International) Drupal releases version 7.41 to fix open 
redirect vulnerability. Drupal’s developers released update 7.41 addressing an open 
redirect vulnerability in the system’s Overlay module in which an attacker could 
redirect Drupal admins, logged into their admin panel, to a fake login page in order to 
harvest credentials. The vulnerability was previously addressed, but incompletely 
patched in version 7.38. 

Source: http://news.softpedia.com/news/drupal-releases-version-7-41-to-fix-open- 
redirect-vulnerability-495083.shtml 

20. October 22, Softpedia - (International) New ransomware infects computers via 
Windows Remote Desktop Services. Researchers discovered a new strain of 
ransomware that hackers are manually installing by brute-forcing user account 
passwords onto Windows computers that have Remote Desktop or Terminal Services 
connections open. Once installed, the ransomware encrypts files with a 2048-bit RSA 
key and drops a file with information on how to pay the ransom. 

Source: http://news.softpedia.com/news/new-ransomware-infects-computers-via- 
windo ws-remote-desktop- services -495067 . shtml 

21. October 22, Securityweek - (International) Apple patches flaws in OS X, iOS, other 
products. Apple released OS X El Capitan vl 0.1 1.1 addressing 60 vulnerabilities that 
could be exploited for arbitrary code execution, denial-of-service (DoS), information 
disclosure, privilege elevation, overwriting arbitrary files, and bypassing restrictions, as 
well as a flaw that allowed malicious actors to exercise unused Extensible Firmware 
Interface (EFI) functions. The update also addresses two vulnerabilities used for 
jailbreaks and a lock screen issue. 

Source: http://www.securitvweek.com/apple-patches-flaws-os-x-ios-other-products 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 



22. October 22, WP1X 11 New York City; Associated Press - (New Jersey) 2 firefighters 
hurt in Passaic apartment fire; hundreds displaced. Passaic County officials 
reported that an 8-alarm fire at an apartment building displaced up to 400 people 
October 21 after the fire began on the top floor and spread to surrounding areas, 
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injuring 2 firefighters. The incident was contained and the Red Cross is assisting 
displaced residents. 

Source: http://pixll.com/2015/10/21/firefighter-iniured-battling-6-alarm-fire-in- 
passaic-apartment-building/ 

23. October 21, Miami Herald - (Florida) Power and water back on in after main break 
shuts down service at Miami Beach high rises. A Miami Beach official reported 
October 21 that power and water services were restored October 22 following a water- 
main break that left 5 high-rise towers without power and water for several hours. 
Source: http://www.miamiherald.com/news/local/community/miami-dade/miami- 
beach/article408 1 2042 .html 



24. October 21, Danbury News-Times - (Connecticut) Mystery substance in “Ebola” vial 
forces evacuation of Danbury office building. Danbury Fire officials reported that 
about 150 employees were evacuated and told to go home from ComNet and several 
other businesses October 21 following an incident in which a man brought a vial 
marked “Ebola” into the building. The man allegedly claimed the vial contained a cure 
to the disease and officials found no threat to the environment. 

Source: http://www.newstimes.com/news/article/Mvsterv-substance-in-vial-forces- 
evacuation-of-6579650.php 

Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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